I would suggest continuing to use log4j in the 3.x release. A new logging framework would fit nicely with the other proposed changes in 4.x.
If you don't immediately disagree with this suggestion, please create a Jira and mark it for 4.x Thanks! On Sat, Jan 18, 2020, 2:24 PM Patrick Hunt <ph...@apache.org> wrote: > I committed the fix for log4j (thanks Enrico), however now we're seeing > issues with jackson-databind again: > https://issues.apache.org/jira/browse/ZOOKEEPER-3699 > I don't think we're impacted (ehcache) but we should upgrade the library > again. > > Patrick > > > On Wed, Jan 8, 2020 at 2:01 AM Enrico Olivelli <eolive...@gmail.com> > wrote: > > > The problem is about log4j server, we are not using it. > > > > This is my proposal, essentially to ignore the warning > > https://github.com/apache/zookeeper/pull/1209 > > > > as pointed in your JIRA > > https://issues.apache.org/jira/browse/ZOOKEEPER-3677 > > > > we should get aways from the old log4j and move to a modern library, > > I feel it is better to defer to 3.7.0 > > > > Using slf4j the users will be free to use their own provider > > > > Enrico > > > > Il giorno mar 7 gen 2020 alle ore 18:25 Patrick Hunt <ph...@apache.org> > ha > > scritto: > > > > > owasp is currently failing: > > > > > > https://issues.apache.org/jira/browse/ZOOKEEPER-3677 > > > > > > Patrick > > > > > > On Tue, Jan 7, 2020 at 8:48 AM Enrico Olivelli <eolive...@gmail.com> > > > wrote: > > > > > > > Hi, > > > > I have deployed to https://repository.apache.org/snapshots/ a > version > > of > > > > ZooKeeper built from branch-3.6. > > > > > > > > This way you can try it just by adding these lines to your pom.xml > > > > > > > > <repository> > > > > <id>apache-snapshots</id> > > > > <snapshots> > > > > <enabled>true</enabled> > > > > </snapshots> > > > > <url>https://repository.apache.org/snapshots/</url> > > > > </repository> > > > > > > > > We did the best to keep ZooKeeper 3.6.0 compatible with 3.5, but if > you > > > > have cycles to try your application with 3.6.0-SNAPSHOT this will > help > > a > > > > lot in fixing problems before the official VOTE thread. > > > > > > > > We are still waiting for the last patch for 3.6.0....stay tuned > > > > > > > > Best regards > > > > Enrico > > > > > > > > > >
